I am attempting to connect a checkpoint VPN-1 edge x16 to a Cisco 2950 via a VLAN trunk. I have defined the various VLANs on the firewall and set the DMZ/WAN2 port to be a VLAN trunk. This port is connected to the Cisco 2950 port fa0/1, this port is also defined as a trunk with a native VLAN of 1. Both the checkpoint firewall and the Cisco show that the trunking type is 802.1Q and also show link from both ends.
From a port based unmanaged switch I can establish ICMP (ping) connectivity with all VLAN addresses defined on the checkpoint firewall. I have a Solaris 10 system connected to the Cisco to a port defined on VLAN 1 (management VLAN) and can access the command line and http interfaces. What I cannot do is access any interface on the checkpoint firewall from the Cisco switch.
One of the items I have noticed is that when the Solaris system, or a system on the unmanaged switch attempts to pink the Cisco or ping to the Solaris system I get an error entry in the event log Here is an entry from attempting to pink the firewall interface 192.168.11.1 from the Solaris server 192.168.11.2: "00171 Apr 02 08:44:19 PM ICMP192.168.11.2 [SPOOFED!] 192.168.11.18 (Echo Request)" Here is the error when I attempt to ping the Soalris system from a system on the unmanaged switch: "00169 Apr 02 08:43:30 PM ICMP192.168.10.9 (Conundrum) 192.168.11.2 (Charon) 8 (Echo Request)"
I have routes defined for all VLANs defined on the checkpoint firewall.
I need to be able to connect to the firewall to eventually access other VLANs and the outside world.
Any help is appreciated.